Soru

Zorluk: KolayAmazon Cognito Authentication and Authorization

A developer is building a new web application and needs to implement user registration, login, and profile management. The developer wants to store user profile data directly in a managed user directory and support federated sign-in through external identity providers. Which Amazon Cognito feature should the developer use?

  1. Amazon Cognito user poolsCevap
  2. B
    Amazon Cognito identity pools
  3. C
    Amazon Cognito user pool authorizers
  4. D
    AWS IAM trust policies

Cevap

Amazon Cognito user pools
Amazon Cognito user pools act as user directories that provide sign-up and sign-in services for web and mobile applications. They store user profiles and support authentication using external identity providers.

Adım Adım Çözüm

1
Analyze the requirements for storing user profiles, managing registration/login, and supporting federated identity providers.
The requirements point to a need for a managed user directory.
Before selecting a service, the specific authentication vs. authorization needs must be identified.
2
Distinguish between the directories component and the credentials federation component of Amazon Cognito.
User Pools manage authentication and directories, while Identity Pools manage authorization and temporary AWS credentials.
This prevents mixing up the two main features of Amazon Cognito.
3
Select the component that natively matches the directory, registration, and login requirements.
Amazon Cognito user pools is the correct selection.
User Pools are specifically designed to act as the identity provider and user directory.

Anahtar Kavram

Distinction between Amazon Cognito User Pools and Identity Pools
Tahmini Süre:45s
Bu soruyu puanla